RegCloseKey, RegQueryValueExA, RegOpenKeyExA, RegSetValueExA, RegCreateKeyExA, StartServiceA, ControlService, QueryServiceStatus, CloseServiceHandle, OpenServiceA, OpenSCManagerA, AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken, RegDeleteKeyA, RegDeleteValueA, RegQueryInfoKeyA, RegEnumKeyExA, ConvertStringSecurityDescriptorToSecurityDescriptorA, FreeSid, SetNamedSecurityInfoA, SetEntriesInAclA, AllocateAndInitializeSid, LookupAccountSidA, IsValidSid, GetTokenInformation, GetUserNameA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryValueExW, RegOpenKeyExW, TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsA, UnregisterTraceGuids, CheckTokenMembership, RegEnumKeyA, RegOpenKeyA, OpenThreadToken, RegQueryInfoKeyW, QueryServiceConfigA, ChangeServiceConfigA, TraceMessage

DwmIsCompositionEnabled

GetStockObject, ExtEscape, CreateDCA, DeleteDC, GetDeviceGammaRamp, SetDeviceGammaRamp, GetDeviceCaps

Sleep, GetProcAddress, LoadLibraryA, CloseHandle, TerminateThread, WaitForSingleObject, CreateThread, MultiByteToWideChar, OpenProcess, GetCurrentProcessId, FreeLibrary, CreateProcessA, LocalFree, FormatMessageA, GetLastError, TerminateProcess, GetCurrentProcess, ResetEvent, GetTickCount, CreateEventA, SetEvent, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, WideCharToMultiByte, lstrlenW, RaiseException, InitializeCriticalSection, DeleteCriticalSection, lstrlenA, OpenMutexA, lstrcpynA, InterlockedIncrement, InterlockedDecrement, GetModuleFileNameA, SizeofResource, LoadResource, FindResourceA, LoadLibraryExA, EnterCriticalSection, LeaveCriticalSection, lstrcpyA, lstrcatA, ReadFile, WriteFile, SetFilePointer, GlobalFree, GlobalAlloc, CreateFileA, ProcessIdToSessionId, ReleaseMutex, CreateMutexA, lstrcpynW, lstrcmpiW, GetModuleFileNameW, GetCurrentThreadId, GetExitCodeThread, lstrcmpA, HeapFree, HeapAlloc, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, RtlUnwind, HeapReAlloc, GetFullPathNameA, GetCommandLineA, HeapDestroy, HeapCreate, VirtualFree, IsBadWritePtr, LCMapStringA, LCMapStringW, GetOEMCP, GetCPInfo, ExitProcess, HeapSize, SetUnhandledExceptionFilter, GetDriveTypeA, GetCurrentDirectoryA, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, UnhandledExceptionFilter, GetStringTypeA, GetStringTypeW, IsBadReadPtr, IsBadCodePtr, SetStdHandle, QueryPerformanceCounter, GetSystemTimeAsFileTime, SetConsoleCtrlHandler, FlushFileBuffers, lstrcmpiA, OutputDebugStringA, GetModuleHandleA, GetVersionExA, IsDBCSLeadByte, UnmapViewOfFile, GetVersionExW, GetSystemDirectoryW, GetFullPathNameW, GetCommandLineW, GetFileAttributesW, GetEnvironmentVariableW, SetEndOfFile, DeleteFileW, GetFileSizeEx, LocalAlloc, LoadLibraryW, DeviceIoControl, QueryPerformanceFrequency, CompareStringA, GetSystemDirectoryA, SwitchToThread, InterlockedCompareExchange, GetCurrentThread, TlsSetValue, CreateFileMappingA, TlsGetValue, TlsAlloc, InitializeCriticalSectionAndSpinCount, GetModuleHandleW, SetThreadLocale, CompareStringW, DeleteFileA, GetFileSize, FindClose, FindFirstFileA, DecodePointer, EncodePointer, IsProcessorFeaturePresent, IsValidCodePage, TlsFree, SetLastError, IsDebuggerPresent, GetLocaleInfoW, SetEnvironmentVariableW, SetEnvironmentVariableA, FatalAppExitA, GetDriveTypeW, GetStartupInfoW, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, GetConsoleCP, GetConsoleMode, GetCurrentDirectoryW, SetCurrentDirectoryW, WriteConsoleW, GetProcessHeap, MapViewOfFileEx, CreateFileW, GetTimeFormatA, GetDateFormatA, GetTimeZoneInformation, OpenSemaphoreA, ReleaseSemaphore, CreateSemaphoreA, ExpandEnvironmentStringsA, WriteConsoleA, GetConsoleOutputCP, GetStringTypeExW, GetStringTypeExA, GetEnvironmentVariableA, GetVersion, lstrcmpW, WaitForMultipleObjects, DllMain

StringFromGUID2, CoTaskMemRealloc, CoTaskMemFree, CoTaskMemAlloc, CoCreateInstance

SetupDiCallClassInstaller, SetupDiSetClassInstallParamsA, SetupDiGetDeviceInstallParamsA, CM_Get_DevNode_Status_Ex, CM_Get_Device_ID_ExW, SetupDiGetDeviceInfoListDetailA, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceRegistryPropertyA, SetupDiChangeState, SetupDiGetClassDevsA, CM_Reenumerate_DevNode, SetupDiEnumDeviceInfo, SetupDiGetDeviceInterfaceDetailA, SetupDiEnumDeviceInterfaces, SetupDiOpenDevRegKey, SetupDiGetClassDevsExA

SHGetSpecialFolderPathA, SHCreateDirectoryExA, SHGetFolderPathA

PathFindFileNameW, PathFindExtensionA, SHGetValueA, PathFindFileNameA, SHDeleteValueA, StrStrIA, PathFileExistsA, PathAppendA

GetThreadDesktop, OpenInputDesktop, SetThreadDesktop, TranslateMessage, CloseDesktop, DispatchMessageA, SendMessageA, RegisterWindowMessageA, SendNotifyMessageA, CharNextA, EnumWindows, UnregisterClassA, EnumDisplayDevicesA, EnumDisplaySettingsExA, ChangeDisplaySettingsExA, EnumDisplaySettingsA, PostQuitMessage, FindWindowA, GetUserObjectInformationA, GetWindowThreadProcessId, PostMessageA, LoadCursorA, RegisterClassA, CreateWindowExA, GetMessageA, DefWindowProcA, GetSystemMetrics, GetDesktopWindow, CharNextW, IntersectRect, IsWindowVisible, DestroyWindow, GetMonitorInfoA, IsWindowEnabled, SetTimer, CharLowerA, CharLowerW, CharUpperA, CharUpperW, RedrawWindow

GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA